RT Journal Article
T1 An Event Driven Hybrid Identity Management Approach to Privacy Enhanced e-Health
A1 Sanchez Guerrero, Rosa Maria
A1 Almenares Mendoza, Florina
A1 Díaz Sánchez, Daniel
A1 Marín López, Andrés
A1 Arias Cabarcos, Patricia
A1 Sanvido, Fabio
AB Credential-based authorization offers interesting advantages for ubiquitous scenarios involving limited devices such as sensors and personal mobile equipment: the verification can be done locally; it offers a more reduced computational cost than its competitors for issuing, storing, and verification; and it naturally supports rights delegation. The main drawback is the revocation of rights. Revocation requires handling potentially large revocation lists, or using protocols to check the revocation status, bringing extra communication costs not acceptable for sensors and other limited devices. Moreover, the effective revocation consent—considered as a privacy rule in sensitive scenarios—has not been fully addressed.This paper proposes an event-based mechanism empowering a new concept, the sleepyhead credentials, which allows to substitute time constraints and explicit revocation by activating and deactivating authorization rights according to events. Our approach is to integrate this concept in IdM systems in a hybrid model supporting delegation, which can be an interesting alternative for scenarios where revocation of consent and user privacy are critical. The delegation includes a SAML compliant protocol, which we have validated through a proof-of-concept implementation. This article also explains the mathematical model describing the event-based model and offers estimations of the overhead introduced by the system. The paper focus on health care scenarios, where we show the flexibility of the proposed event-based user consent revocation mechanism.
PB MDPI
SN 1424-8220
YR 2012
FD 2012-05-10
LK https://hdl.handle.net/10016/27900
UL https://hdl.handle.net/10016/27900
LA eng
NO This work was partially founded by the Spanish Ministry of Science and Innovation under the project TEC2010-20572-C02-01 (CONSEQUENCE) and by the State of Madrid (Spain) under the contract number S2009/TIC-1650 (e-Madrid). Moreover, the authors would like to thank to the anonymous referees for comments and recommendations for the paper improvement.
DS e-Archivo
RD 1 sept. 2024